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AMENDED 

APPEAL BRIEF PURSUANT TO 37 C.F.R § 41.37 

Sir: 

The final rejection of claims 1-21 is hereby appealed. 



I. REAL PARTY IN INTEREST 

The real party in interest is Hewlett-Packard Development Company, LP, a limited 
partnership established under the laws of the State of Texas and having a principal place of 
business at 20555 S.H. 249, Houston, TX 77070, U.S.A. (hereinafter "HPDC"). HPDC is a 
Texas limited partnership and is a wholly-owned affiliate of Hewlett-Packard Company, a 
Delaware Corporation, headquartered in Palo Alto, CA. The general or managing partner of 
HPDC is HPQ Holdings, LLC. 
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II. RELATED APPEALS AND INTERFERENCES 

The following is a related appeal: Appeal Brief filed on August 6, 2007, in U.S. Serial 
No. 10/355,470 (now U.S. Patent No. 7,313,238). The inventors of the '470 application are 
Kevin E. Fu, Mahesh Kallahalla, and Rain Swaminathan. The Assignee of the '470 application 
is the Hewlett-Packard Development Company, L.P. The legal representative that suhmitted the 
Appeal Brief in the '470 application is Dan C. Hu, Registration No. 40,025. 

The '470 application was identified as a related application on page 1 of the present 
Specification. In response to the Appeal Brief filed on August 6, 2007 in the '470 application, a 
Notice of Allowance was mailed on October 29, 2007. 

III. STATUS OF THE CLAIMS 

Claims 1-21 have been finally rejected and are the subject of this appeal. 

IV. STATUS OF AMENDMENTS 

No amendments after final rejection have been submitted. 

V. SUMMARY OF THE CLAIMED SUBJECT MATTER 

The following provides a concise explanation of the subject matter defined in each of the 
independent claims involved in the appeal, referring to the specification by page and line number 
and to the drawings by reference characters, as required by 37 C.F.R. § 41.37(c)(l)(v). Each 
element of the claims is identified by a corresponding reference to the specification and drawings 
where applicable. Note that the citation to passages in the specification and drawings for each 
claim element does not imply that the limitations from the specification and drawings should be 
read into the corresponding claim element. 
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Independent claim 1 recites a method of windowed backward key generation, 
comprising: 

a) providing (Fig. 4:420) information to a user that allows 
determining a limited number of previous keys in a series of keys from a later key 
in the series and wherein said information is derived from at least one of said 
limited number of previous key in said series (Spec, p. 19, lines 1-8; p. 15, line 
10-page 16, line 7); 

b) generating (Fig. 4:440) a key in the series, based at least in part on 
said information provided to said user (Spec, p. 19, lines 16-19); 

c) providing (Fig. 4:450) said key in the series to the user (Spec, 
p. 19, lines 21-22); and 

d) said user determining (Fig. 4:480) at least one key in the limited 
number of previous keys in the series by applying said information to said key in 
the series provided to the user (Spec, p. 20, line 21-p. 21, line 2). 



Independent claim 8 recites a method of windowed backward key rotation, comprising: 

a) providing (Fig. 4:420) to a user a key rotation element and a key 
(Kj), wherein later versions of the key rotation element are determinable by the 
user but previous versions of the key rotation element are not determinable by 
said user (Spec, p. 19, lines 1-8; p. 15, line 10-p. 16, line 7); 

b) generating (Fig. 4:440) a later version of the key (K i+n ) based on a 
later version of the key rotation element, wherein "n" is a positive integer (Spec, 
p. 19, lines 16-19); 

c) providing (Fig. 4:450) to the user the later version of the key (K i+n ) 
(Spec, p. 19, lines 21-22); and 

d) said user determining (Fig. 4:480) a version of the key from (K r 
Ki+n-i), inclusive, by applying a version of the key rotation element to a version of 
the key from (K i+ i-K i+n ), inclusive (Spec, p. 20, lines 21-22). 
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Independent claim 15 recites a method of windowed backward file key generation, 
comprising: 

a) generating (Fig. 4:410) an initial file key (Spec, p. 1 9, lines 4-5); 

b) generating (Fig. 4:410) an initial key rotation exponent, wherein 
said initial key rotation exponent allows previous versions of the file keys to be 
determined back until a pre-determined version of the file key, but no file keys 
further back (Spec, p. 19, lines 4-5; p. 20, lines 4-20); and 

c) providing (Fig. 4:420) said initial file key and said initial key 
rotation exponent to initial users (Spec, p. 19, lines 7-8). 



VI. GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

A. Claims 1, 2, 4-6, 8-13, and 15-21 Rejected Under 35 U.S.C. § 102(a) as Anticipated 
by U.S. Patent Application Publication No. 2002/0152392 (Hardy). 

B. Claims 3, 7, and 14 Rejected Under 35 U.S.C. § 103(a) as Unpatentable Over Hardy 
Alone. 



VII. ARGUMENT 

The claims do not stand or fall together. Instead, Appellant presents separate arguments 
for various independent and dependent claims. Each of these arguments is separately argued 
below and presented with separate headings and sub-headings as required by 37 C.F.R. 
§ 41.37(c)(l)(vii). 

A. Claims 1, 2, 4-6. 8-13, and 15-21 Rejected Under 35 U.S.C. § 102(a) as Anticipated 
by U.S. Patent Application Publication No. 2002/01 52392 (Hardy). 

1. Claims 1, 2, 4-6. 

Independent claim 1 was erroneously rejected as being anticipated by Hardy. 

Claim 1 recites a method of windowed backward key generation, comprising: 

a) providing information to a user that allows determining a limited 
number of previous keys in a series of keys from a later key in the series and 
wherein said information is derived from at least one of said limited number of 
previous key in said series; 
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b) generating a key in the series, based at least in part on said 
information provided to said user; 

c) providing said key in the series to the user; and 

d) said user determining at least one key in the limited number of 
previous keys in the series by applying said information to said key in the series 
provided to the user. 

Hardy does not teach providing information to a user that allows determining a limited 
number of previous keys in a series of keys from a later key in the series. In Hardy, for each 
previous, or subsequent, version of a software product being accessed by a user, a unique key is 
generated which is independent of any other keys used to decrypt the software product. 

As taught by Hardy, an initial software product is encrypted using KEY A, which is 
generated by a random number generator. Hardy, f [0015]. If the initial software product is 
changed such that a different version of the software product is provided, then Hardy teaches that 
the different version of the software product is encrypted with a new encryption key, KEY B, 
which is generated by a random number generator. Id., f [0021]. 

There is absolutely nothing in Hardy that even remotely hints that KEY A can be 
determined from KEY B. Note that claim 1 specifically states that information is provided to a 
user that allows determining a limited number of previous keys in series of keys from a later 
key in the series. If KEY B is considered the later key of claim 1, then there is absolutely no 
teaching whatsoever in Hardy that KEY A can be determined from KEY B. 

The Response to Arguments section of the 6/6/2008 Office Action states that KEY B is 
not found in the claim, and therefore, the Examiner did not have to address Appellant's 
arguments made in the previous Reply to Office Action. 6/6/2008 Office Action at 5. However, 
the Examiner has failed to identify what in Hardy constitutes the following element of claim 1 : 
providing information to a user that allows determining a limited number of previous keys in a 
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series of keys from a later key in the series. With respect to this clause, the Examiner appears to 
have referred to f\\ [0007] and [0021] of Hardy generally, without identifying what in Hardy 
specifically constitutes the later key and the previous keys, and how such previous keys can be 
determined from the later key. It is apparent that the Examiner can find nothing in Hardy that 
corresponds to the above claim feature. 

The Examiner also refers to the SPLIT information that is provided to a user in Hardy; 
note, however, that the SPLIT information of Hardy is a decryption code that is provided to a 
user for combination with a token (TOKEN) to derive KEY A; however, this does not rise to the 
level of determining a previous key from a later key, as recited in claim 1 . 

Since Hardy clearly fails to provide any teaching or hint of the claimed subject matter, 
the rejection of claim 1 and its dependent claims over Hardy is clearly erroneous. 

Reversal of the final rejection of the above claims is respectfully requested. 

2. Claims 8-13. 

Independent claim 8 was also erroneously rejected as being anticipated by Hardy. Claim 
8 recites a method of windowed backward key rotation, comprising: 

a) providing to a user a key rotation element and a key (Kj), wherein 
later versions of the key rotation element are determinable by the user but 
previous versions of the key rotation element are not determinable by said user; 

b) generating a later version of the key (K i+n ) based on a later version 
of the key rotation element, wherein "n" is a positive integer; 

c) providing to the user the later version of the key (K i+n ); and 

d) said user determining a version of the key from (Ki-K i+n _i), 
inclusive, by applying a version of the key rotation element to a version of the key 
from (Kj+i-Ki+n), inclusive. 
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As recited in claim 8, one version of a key from (Ki-Kj,.,, i ). inclusive, is determined 
another version of the key from (K 1+ i-K i+n ), inclusive. As explained above in connection with 
claim 1, Hardy provides absolutely no teaching whatsoever of determining one version of a key 
from another version of the key. As taught by Hardy, random number generators are used to 
independently generate unique keys for different versions of a software product. 

In view of the foregoing, claim 8 and its dependent claims are clearly not anticipated by 

Hardy. 

Reversal of the final rejection of the above claims is respectfully requested. 

3. Claims 15-17, 19-21. 

Independent claim 15 is also not anticipated by Hardy. Claim 15 recites an initial key 
rotation exponent that allows previous versions of file keys to be determined back until a 
pre-determined version of the file key, but not file keys further back. Note that one initial key 
rotation exponent allows multiple previous versions of file keys to be determined. 

If SPLIT in Hardy is considered to be the key rotation exponent of claim 15, then SPLIT 
cannot be used to determine multiple previous versions of file keys, as recited in claim 15; in 
Hardy, SPLIT A would be used to determine just the current key, KEY A. Therefore, claim 15 
and its dependent claims are clearly not anticipated by Hardy. 

Reversal of the final rejection of the above claims is respectfully requested. 

4. Claim 18. 

Claim 18 depends from claim 15, and is therefore allowable for at least the same reasons 
as claim 15. Moreover, claim 18 recites a user generating a previous version of the file key by 
applying a version of the key rotation exponent to a version of the file key. Note that Hardy does 
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not contemplate at all generating one version of the file key from another version of the file key; 
in Hardy, random numbers are generated by random number generators to produce respective 
unique keys for different versions of software. 

Therefore, claim 18 is further allowable for the foregoing reason. 

Reversal of the final rejection of the above claim is respectfully requested. 

B. Claims 3, 7, and 14 Rejected Under 35 U.S.C. § 103(a) as Unpatentable Over Hardy 
Alone. 

1. Claim 3. 

In view of the defective rejection of base claim 1 over Hardy, the obviousness of 
rejection of claim 3 over Hardy alone is defective. 

Moreover, claim 3 further recites providing to the user a key rotation exponent that is 
used to determine a previous key in the series from a later key in the series by exponentiating the 
later key by the key rotation exponent. 

The Examiner argued that it would have been obvious to one of ordinary skill to utilize 
exponentiation "in place of the logical addition 6/6/2008 Office Action at 4. However, as 
explained above, Hardy discloses using random number generators to generate random numbers 
for corresponding unique keys for different versions of software; there is absolutely no teaching 
whatsoever in Hardy of generating one key from another key. Even more specifically. Hardy 
provides absolutely no hint of determining a previous key in the series from a later key in the 
series by exponentiating the later key by the key rotation exponent. Except for the claim itself, 
the Examiner has identified no objective evidence that would have prompted a person of 
ordinary skill in the art to modify the teachings of Hardy to achieve the claimed subject matter. 
Therefore, the obviousness rejection of claim 3 is clearly defective. 
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Reversal of the final rejection of the above claim is respectfully requested. 
2. Claims 7, 14. 

In view of the defective rejection of base claims 1 and 8 over Hardy, the obviousness 
rejection of dependent claims 7 and 14 over Hardy is also defective. Moreover, claim 7 further 
recites that a user is revoked by publishing a version of the revoked user's secret share. The 
Examiner provided a conclusory statement that this feature of claim 7 would be obvious to a 
person of ordinary skill in the art, without providing any basis in fact. In the rejection of claim 5 
(from which claim 7 depends), the Examiner identified TOKEN and SPLIT as constituting the 
secret share and key rotation catalyst. 6/6/2008 Office Action at 3. However, there is absolutely 
no teaching or hint given by Hardy that publishing TOKEN or SPLIT would cause revocation of 
a user. Therefore, the obviousness rejection of claim 7 is clearly defective. 

Claim 14 is similarly allowable over Hardy. 

Reversal of the final rejection of the above claims is respectfully requested. 
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CONCLUSION 



In view of the foregoing, reversal of all final rejections and allowance of ail pending 



claims is respectfully requested. 



Respectfully submitted, 



Date:. 




Dan C. Hu 

Registration No. 40,025 
TROP, PRUNER & HU, P.C. 
1616 South Voss Road, Suite 750 
Houston, TX 77057-2631 
Telephone: (713)468-8880 
Facsimile: (713)468-8883 
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VIII. APPENDIX OF APPEALED CLAIMS 

The claims on appeal are: 



1 1. A method of windowed backward key generation, comprising: 

2 a) providing information to a user that allows determining a limited number of 

3 previous keys in a series of keys from a later key in the series and wherein said information is 

4 derived from at least one of said limited number of previous key in said series; 

5 b) generating a key in the series, based at least in part on said information provided 

6 to said user; 

7 c) providing said key in the series to the user; and 

8 d) said user determining at least one key in the limited number of previous keys in 

9 the series by applying said information to said key in the series provided to the user. 

1 2. The method of Claim 1, wherein said a) comprises providing a key rotation element that 

2 is forward rotatable by said user but is not backward rotatable. 

1 3. The method of Claim 1, wherein said a) comprises providing to the user a key rotation 

2 exponent that is used to determine a previous key in the series from a later key in the series by 

3 exponentiating said later key by said key rotation exponent. 

1 4. The method of Claim 2, further comprising: 

2 el) generating a new key rotation element; 

3 e2) generating a new key based, in part, on said new key rotation element; and 

4 e3) distributing said new key to non-revoked users. 

1 5. The method of Claim 1, wherein said a) further comprises providing a secret share and a 

2 key rotation catalyst to said user, wherein said secret share and said key rotation catalyst allow 

3 said user to generate a next key in the series provided sufficient public information is available. 
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1 6. The method of Claim 5, further comprising: 

2 e) publishing at least one public share, wherein the next key in the series is 

3 determinable based on the key rotation catalyst, the secret share, and the at least one public 

4 share. 

1 7. The method of Claim 5, further comprising revoking a user by publishing a version of the 

2 revoked user's secret share. 

1 8. A method of windowed backward key rotation, comprising: 

2 a) providing to a user a key rotation element and a key (K*), wherein later versions 

3 of the key rotation element are determinable by the user but previous versions of the key rotation 

4 element are not determinable by said user; 

5 b) generating a later version of the key (Kj +n ) based on a later version of the key 

6 rotation element, wherein "n" is a positive integer; 

7 c) providing to the user the later version of the key (Ki +n ); and 

8 d) said user determining a version of the key from (Kj-Kj +lv] ), inclusive, by applying 

9 a version of the key rotation element to a version of the key from (Ki+i-Kj +n ), inclusive. 

1 9. The method of Claim 8, wherein said d) comprises: 

2 dl) said user determining a later version of said key rotation element from said key 

3 rotation element provided in said a). 

1 10. The method of Claim 9, wherein said d) further comprises: 

2 d2) said user determining the version of the key K i+n .i by applying the version of the 

3 key rotation element to the version of the key K i+n . 

1 11. The method of Claim 8, further comprising: 

2 el ) generating a new key rotation element; 

3 e2) generating a new key based, in part, on said new key rotation element; and 

4 e3) distributing said key to non-revoked users. 
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1 12. The method of Claim 8, wherein said a) further comprises providing a secret share and a 

2 key rotation catalyst to said user, wherein said secret share and said key rotation catalyst allow 

3 said user to generate a next key in the series provided sufficient public information is available. 

1 13. The method of Claim 12, further comprising: 

2 e) publishing at least one public share, wherein the next key in the series is 

3 determinable based on the key rotation catalyst, the secret share, and the at least one public 

4 share. 

1 14. The method of Claim 12, further comprising revoking a user by publishing a version of 

2 the revoked user's secret share. 

1 15. A method of windowed backward file key generation, comprising: 

2 a) generating an initial fde key; 

3 b) generating an initial key rotation exponent, wherein said initial key rotation 

4 exponent allows previous versions of the fde keys to be determined back until a pre-determined 

5 version of the file key, but no file keys further back; and 

6 c) providing said initial file key and said initial key rotation exponent to initial users. 

1 16. The method of Claim 15, further comprising: 

2 d) joining a new user by distributing said new file key and said new key rotation 

3 exponent to said user. 

1 17. The method of Claim 15, further comprising: 

2 dl) generating a new key rotation exponent; 

3 d2) generating a new fde key based, in part, on said new key rotation exponent; and 

4 d3) distributing said new file key to non-revoked users. 

1 18. The method of Claim 15, further comprising: 

2 d) a user generating a previous version of the file key by applying a version of the 

3 key rotation exponent to a version of the file key. 

iii 
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1 19. The method of Claim 15, wherein: 

2 said a) further comprises generating a key rotation catalyst; and 

3 said c) further comprises providing a secret share and said key rotation catalyst to ones of 

4 said initial users, wherein said secret share and said key rotation catalyst allow said initial users 

5 to generate a new version of the file key provided sufficient public information is available. 

1 20. The method of Claim 19, further comprising: 

2 d) publishing a public share, wherein said initial users are able to determine a new 

3 version of the file key using their own secret shares, the public shares, the key rotation catalyst, 

4 and a previous file key. 



1 21. The method of Claim 19, further comprising: 

2 dl) generating a new key rotation catalyst; 

3 d2) publishing said new key rotation catalyst; 

4 d3) generating a new file key based, in part, on said new key rotation catalyst; and 

5 d4) publishing a revoked user's private share. 
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IX. EVIDENCE APPENDIX 



None. 
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X. RELATED PROCEEDINGS APPENDIX 

The following is a related appeal: Appeal Brief filed on August 6, 2007, in U.S. Serial 
No. 10/355,470 (now U.S. Patent No. 7,313,238). The inventors of the '470 application are 
Kevin E. Fu, Mahesh Kallahalla, and Ram Swaminathan. The Assignee of the '470 application 
is the Hewlett-Packard Development Company, L.P. The legal representative that submitted the 
Appeal Brief in the '470 application is Dan C. Hu, Registration No. 40,025. 

The '470 application was identified as a related application on page 1 of the present 
Specification. In response to the Appeal Brief filed on August 6, 2007 in the '470 application, a 
Notice of Allowance was mailed on October 29, 2007. 

No decision was rendered by a court or the Board in response to this Appeal Brief. 



